Senior Stack Engineer

Northwave; Utrecht; On-site; EUR 60,000 - 80,000; Full time

Job summary

A cybersecurity specialist in Utrecht is looking for a Stack Engineer to design and maintain the technical stack of their Security Operations Center. You will ensure the monitoring platform's reliability and create pipelines for customer onboarding. The ideal candidate has over 5 years of experience, is comfortable working closely with operations, and takes ownership of their work to maintain security and clarity in designs. Join a team that values real impact in protection efforts across Europe, with quick decision-making and technical input valued.

Qualifications

• 5+ years’ experience in a similar engineering role.
• Comfortable working close to operations and translating needs into technical solutions.
• Ability to own and maintain the systems built.

Responsibilities

• Design and evolve the technical stack for the Security Operations Center.
• Create deployment pipelines for onboarding customers.
• Develop intelligent correlation mechanisms for better alert management.

Skills

Python for automation

APIs for integration

GNU/Linux environments

Networking fundamentals

Security-by-design practices

Job description

Northwave is a leading European cybersecurity specialist, protecting organizations against increasingly complex digital threats. With deep expertise in offensive and defensive security, behavior, and monitoring, we support our customers through managed security services and high-impact consultancy. Our Security Operations Center plays a central role in this mission, operating as a high-trust, high-precision environment where technology and expertise come together.

To further strengthen this foundation, we are expanding our engineering capability within the SOC platform.

The role

As a Stack Engineer, you are responsible for designing, building, and evolving the technical stack that powers our Security Operations Center. You work at the intersection of engineering, automation, and security operations, ensuring that our monitoring platform scales reliably and remains operationally sharp.

You design deployment pipelines that enable seamless onboarding of new customers and use cases. You develop intelligent correlation and deduplication mechanisms so analysts and clients only see alerts and vulnerabilities that truly matter. You also create and maintain a centralized view of customer implementations, giving the SOC immediate insight into active configurations, use cases, and points of contact.

Your work directly impacts how efficiently our SOC operates and how effectively we protect critical infrastructure across Europe.

Technology & environment

You will work in an environment where engineering quality and operational reliability are essential:

• Python for automation, orchestration, and building smart internal tooling
• APIs for integrating and connecting security and monitoring systems
• GNU/Linux environments with strong command-line usage
• Networking fundamentals for designing, operating, and troubleshooting monitoring setups
• Security-by-design as a default, not an afterthought

Who you are

• You are an engineer who prefers systems over slogans. You like understanding how things actually work in production and improving them where they break, slow down, or create noise.
• You have a done a similar job for at least 5 years.
• You are comfortable working close to operations. You do not need everything fully specified upfront, and you are able to translate practical SOC needs into technical solutions that hold up under pressure.
• You take ownership of what you build and feel responsible for keeping it understandable, maintainable, and secure.
• You communicate clearly with analysts and engineers, make pragmatic choices, and focus on outcomes rather than theoretical perfection.

Why Northwave

At Northwave, this role sits close to real security operations. The systems you build are used daily by SOC analysts and directly affect how incidents are detected, escalated, and resolved.

You are not building demos or side projects. You are improving a production SOC stack that protects real organizations. Decisions are made quickly, technical input is taken seriously, and improvements are implemented rather than parked on a roadmap.

You work with experienced professionals in an environment that values competence, responsibility, and getting things right.

Interested in building systems that are used under real pressure, not in theory? Contact Youri Roelofs at [e-mail].